You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

HijackThis Log

I somehow just got infected with something, not sure exactly what though. Attached is my log, hoping you can offer advice. Computer runs really slow now, seems to always be working hard to do things but big delays opening most things. Also get alot of pop-ups.

I ran Spybot Search and Destroy and it found quite a few things that I had it remove. Can't run Adaware as I only have Windows 95, not 98. Also ran Spyware Blaster. Thank you in advance for your assistance.

BC AdBot (Login to Remove)

Print these instructions because you are not able to access the Internet in SafeMode.

Make sure you are set to show hidden files and folders: A. On the Tools menu in Windows Explorer, click Folder Options.B. Click the View tab.C. Under Hidden files and folders, click Show hidden files and folders.D. Uncheck Hide extensions for known filetypes and Hide protected operating system files.How to see hidden files in Windows

Search for these files and delete them if found:C:\WINDOWS\SYSTEM\AANTX.DLL <-- this fileC:\WINDOWS\SYSTEM\WINB2S32.DLL <-- this fileC:\WINDOWS\LOCALNRD.DLL <-- this fileC:\WINDOWS\SYSTEM\ATPART~1.DLL <-- this fileC:\WINDOWS\BXXS5.DLL <-- this fileC:\WINDOWS\SYSTEM\mbdxfl.exe <-- this fileC:\WINDOWS\CONSCORR.exe <-- this fileC:\WINDOWS\wupdt.exe <-- this file

Delete these folders:Internet Optimizer in C:\Program Files\WEB_REBATES in C:\PROGRAM FILES\

REBOOT normally.

Perform a full scan here: Trendmicro, tick AutoClean and let him remove anything he finds.

Run HijackThis! again and post a new log.

Everyday is virus day. Do you know where your recovery CDs are ?Did you create them yet ?

Then, locate fixme.reg on your Desktop and (double) click on it.You will receive a prompt similar to: "Do you wish to merge the information into the registry ?".Answer 'Yes' and wait for a message to appear similar to "Merged Successfully".

Run HijackThis!, press "Scan" and tick the boxes next to all these, close all other windows and browsers, then press "Fix Checked" button.

O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe

Reboot.

Delete this folder:ISTsvc in C:\Program Files\

Empty the Recycle Bin.

Run HijackThis and post a new log please.

Everyday is virus day. Do you know where your recovery CDs are ?Did you create them yet ?

Update your AntiVirus Software - It is imperitive that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.

Use a Firewall - I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is succeptible to being hacked and taken over. I am very serious about this and see it happen almost every day with my clients. Simply using a Firewall in its default configuration can lower your risk greatly.

For a tutorial on Firewalls and a listing of some available ones see the link below:

Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.

Install Spybot - Search and Destroy - Install and download Spybot - Search and Destroy with its TeaTimer option. This will provide realtime spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with program on a regular basis just as you would an antivirus software.

Appreciate all your help Cryo, you're instructions were excellent and the solutions perfect!! Thanks for the advice on how to help keep the computer clean in the future...looks like I have some work to do this weekend. Again, many thanks for your assistance and quick replys, most appreciated!